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Description 

METHOD, SYSTEM, AND STORAGE 
MEDIUM FOR PROVIDING DEEP LINKING 
FUNCTIONS WITH DIGITAL RIGHTS 

MANAGEMENT 

Background of Invention 

[0001] The present invention relates generally to web-based ser- 
vices and, more particularly, to a method, system, and 
storage medium for providing deep linking functions with 
digital rights management. 

[0002] a deep link refers to a hyperlink located on a web page or 
search engine query that, when selected by a user, trans- 
fers the user to another web page of a web site that is dif- 
ferent than the web site's home page or "first page". As 
evidenced in recent litigation, there has been much con- 
troversy over the legal and ethical implications associated 
with deep linking activities in terms of the digital rights of 
web site owners and content authors. Some businesses 



and advertisers object to the proliferation of deep links 
because they can result in a web site visitor bypassing 
pages that incorporate paid advertising. Also of concern is 
the potential for copyright infringement where a deep link 
causes a visitor to bypass important copyright information 
that would otherwise inform the public of the identity and 
ownership rights of the author and may interfere with an 
author's right to display or communicate his/her work to 
the public where the visitors are diverted away from the 
author's web site and toward the offending web site. 

[0003] a related issue is the practice of using browser software 
to "frame" content from another online source. Legal diffi- 
culties may arise because a visitor sees the original web 
site content, which may be copyright protected, framed by 
a different web site with a different Uniform Resource Lo- 
cator, and possibly with different logos and advertising. 
This practice may constitute copyright infringement be- 
cause copies created in the process of framing may con- 
stitute a reproduction of the work that is subject to prop- 
erty rights by the author. 

[0004] Accordingly, it would be desirable to be able to provide a 
means for web site owners to comply with a target web 
site's requirements to display specified web pages and/or 



web page elements that would otherwise be avoided 

through the process of deep linking activities. It is also 

desirable to provide a means for target web site owners 

and/or authors to communicate their desired display of 

web pages to other web site owners and authors who wish 

to link their site to the target site. 
Summary of Invention 

[0005] The foregoing discussed drawbacks and deficiencies of 
the prior art are overcome or alleviated by a method for 
providing deep linking activities with digital rights man- 
agement. In an exemplary embodiment, the method in- 
cludes identifying a hypertext link on a source web page 
as a deep link and, upon selecting the deep link, access- 
ing a deep link table associated with the deep link. The 
hypertext link refers to a target web page on a target web 
site. The deep link table contains web page links and rules 
operable for establishing web content that is to be pre- 
sented to a visitor of the target web site. The method also 
includes displaying web content to the visitor in accor- 
dance with the rules. The invention also includes a system 

and a storage medium. 
Brief Description of Drawings 



[0006] Referring to the exemplary drawings wherein like ele- 
ments are numbered alike in the several FIGURES: 

[0007] FIG. 1 is a block diagram of a system upon which the deep 
link system is implemented in accordance with an exem- 
plary embodiment of the invention; 

[0008] FIG. 2 is a flowchart describing a process of implementing 
the deep link system in accordance with a further aspect 
of the invention; 

[0009] FIG. 3 illustrates a sample deep link table created by the 
deep link system in accordance with a further aspect of 
the invention; 

[0010] FIG. 4 is a flowchart describing the process of creating a 
deep link table in accordance with a further aspect of the 
invention; 

[001 1] FIG. 5 is a flowchart describing the process of creating a 
deep link table in accordance with a further aspect of the 
invention; 

[0012] FIG. 6 is a flowchart describing the process of creating a 
deep link table in accordance with a further aspect of the 
invention; 

[0013] FIG. 7 is a flowchart describing the process of creating a 
deep link table in accordance with a further aspect of the 
invention; 



[0014] piGs. 8A and 8B are flowcharts illustrating how process 
software implementing the systems and methods of the 
invention may be integrated into client, server, and net- 
work environments; 

[0015] piGs. 9A and 9B are flowcharts illustrating various ways in 
which process software of the invention may be semi- 
automatically or automatically deployed across various 
networks and onto server, client (user), and proxy com- 
puters; 

[0016] FIGs. 10A through 10C are flowcharts illustrating how 
process software for implementing the systems and 
methods of the invention are deployed through the instal- 
lation and use of two different forms of a virtual private 
network (VPN); and 

[0017] FIGs. 11A and 11B are flowcharts illustrating how the pro- 
cess software for implementing the systems and methods 
of the invention can be deployed through an On Demand 
business model, which allows the process software to be 
shared and simultaneously service multiple customers in a 
flexible, automated fashion under a pay- 

for-what-you-use plan. 
Detailed Description 

[0018] Disclosed herein is a method, system, and storage 



medium for providing deep linking functions with digital 
rights management. The deep link system provides a 
means to display web pages and elements of web pages 
that are otherwise avoided when deep linking occurs. The 
deep link system builds a path (e.g., a deep link table) to 
the deep link of the target page. The user traverses each 
screen in accordance with the links provided in the deep 
link table in an order specified by the target web site. 
[0019] The following terms and definitions are provided for ref- 
erence. 

[0020] Source web site. A source web site as used herein refers 
to a web site that includes one or more hypertext links to 
another web site (e.g., target web site). The second web 
site is typically authored/owned by an individual or entity 
that is different than the author of the source web site. 

[0021] Source page. A source page refers to a web page located 
on a source web site. 

[0022] Target web site. A target web site is a web site that is re- 
ferred to by a source web site via one or more hypertext 
links. 

[0023] Target page. A target page refers to a web page located 

on a target web site. 
[0024] Direct Access. Direct access occurs when a source web 



site author includes a link to content on a target web site 
without considering the possible implications of copy- 
rights held by the target site owner. The web browser, en- 
countering the link, immediately displays the information 
referred by the link. 
[0025] Deep Access. A source web site author includes a link to 
content on a target web site, considering the implications 
of digital rights management for the owner of the target 
web site. 

[0026] implicit deep link access. A source web site author in- 
cludes a link to a target web site, considering the path by 
which the pages on the target web site would be reached 
by a typical visitor, and replicates those actions in the ref- 
erence to the target web site. The source web site author's 
intent is to make sure that any side effects of viewing the 
target web pages of interest are repeated when including 
the hypertext link to the target web site's page. 

[0027] implicit deep linking occurs when several pages are in- 
tended to be viewed before a page of interest is viewed. 
The design of a target web site, particularly its connectiv- 
ity of which page links to which, implicitly expresses the 
content owner's/author's intentions of what pages should 
be displayed before, during, and after the display of a 



page of interest, typically beginning at the target web 
site's home page. In this instance, source site authors 
seeking to respect the content owners rights determine 
how to follow the target site owner's intent by manually or 
automatically analyzing the target site. Following the 
analysis, a deep link table is created on the source server, 
to tell the user's web browser how to use intermediate 
content to replicate the target web site author's intent. 

[0028] Explicit deep link access. A target web site author speci- 
fies explicitly the intended digital rights management 
process that is to be used when the content is referred to 
by source web site authors. 

[0029] Explicit deep linking occurs where the content author 

makes specific intentions known to potential source au- 
thors who are linking to pages on the target web site, by 
creating deep link tables for each page or element of a 
page that is to be deep linked. This makes it convenient 
for the source page author to comply with the target au- 
thor's intentions. A web page element refers to a portion 
of a web page such as an image, a logo, a banner, etc. 

[0030] intermediate content. Intermediate content refers to web 
pages on a target web site that should be shown before, 
during, and/or after display of a target web page, in order 



to comply with the digital rights management implications 
in implicit or explicit access. The web pages shown before 
the display of the target page are also referred to as "pre- 
display" content. The web pages shown during the display 
of the target page are also referred to herein as "with- 
display" content, and the web pages shown after the dis- 
play of the target page are also referred to herein as "post- 
display" content. 

[0031] Deep link table. A deep link table refers to a table con- 
taining the information required on a source web site that 
is necessary to comply with implicit or explicit deep ac- 
cess. The table may be populated by one or more of the 
four processes described further herein. 

[0032] p a g e of interest. A page of interest refers to a web page 
containing information desired by a visitor. A page of in- 
terest is also referred to herein as "target web page" as 
described above. 

[0033] p r j or a rt systems generally allow for direct access to a tar- 
get web page. When one web page (e.g., a source page) 
refers to another page (e.g., a target page) by indicating 
its Uniform Resource Locator (URL) in a hypertext link, a 
web browser immediately displays the target web page on 
the visitor's computer screen. Web site authors typically 



organize their content in such a way that various web 
pages are to be viewed in a defined order. However, when 
a source web site author wants to reference information 
on a target's site, the target site's intent of showing the 
desired information (in the order desired) may be defeated 
when the source site makes a direct link to the page of in- 
terest. The deep link system of the invention provides a 
means to display web pages and elements of web pages 
that are intentionally or unintentionally avoided when 
deep linking occurs. 

[0034] Referring initially to FIG. 1, there is shown a block dia- 
gram of a network system for implementing the deep link 
system. Network system 100 includes a computer system 
102, a source server 104, and a target server 106 in com- 
munication with each other via a network such as the In- 
ternet or other suitable networking architecture. 

[0035] Computer system 102 may be a general purpose desktop 
computer that subscribes to an Internet service provider 
and includes operating system software, a web browser 
118, and any other suitable programs that reside in mem- 
ory and execute on computer system 102. The deep link 
system may be executed on source server 104, target 
server 106, or a combination of the above. 



[0036] Server 104 and 106 each comprise a high-powered multi- 
processor computer device including web server and ap- 
plications server software for receiving requests from 
computer system 102 to access web pages over the World 
Wide Web. The services provided by the deep link system 
may be provided by an electronic utilities (e-utilities) 
business that outsources computing resources such as 
applications, such as the deep link system. 

[0037] a source web site 120 is in communication with source 
server 104 and represents a web site that includes a web 
page 122 (also referred to as source web page 122). The 
source web page 122 includes a deep link 124 to another 
web site (e.g., target web site 126). The deep link 124 is 
described further herein. In one embodiment, source 
server 104 executes the deep link system 108 for per- 
forming implicit deep link access and stores deep link ta- 
bles 110 as described further herein. A sample deep link 
table is shown in FIG. 3. 

[0038] System 100 also includes a target server 106 that includes 
a target web site 126 and target web page 128. Target 
web page 128 represents a page that is of interest to a 
visitor of the web site. Intermediate content pages 
132-134 represent web pages that the target web site or- 



ganizes in a manner and with the intention that they be 
displayed sequentially and prior to the display of the tar- 
get web page 128. Examples of intermediate content 
pages 132-134 may include advertising, disclaimer no- 
tices, copyright information, licensing terms and condi- 
tions, etc. "With-display" content page 136 represents a 
web page that is intended to be viewed at the same time 
the target page 128 is viewed. Typical "with-display" con- 
tent includes advertising and page frames or pop-up 
frames. Likewise, "post-display" content page 138 repre- 
sents a web page that is intended to be viewed subse- 
quent to the display of the target web page 128. Examples 
of post-display information includes advertising, cus- 
tomer satisfaction queries, and web surveys. 

[0039] | n an alternative embodiment, target server 106 executes 
the deep link system 112 and performs explicit deep link 
access functions. Target server 106 stores deep link ta- 
bles 114. Target server 106 also executes run time rules 
116 as will be described further herein. 

[0040] The deep link system may be executed as a standalone 
application that is installed or downloaded on computer 
system 102 or may be incorporated into an existing web 
services application, web browser program, or commer- 



cially-available product as an enhancement feature. Fur- 
ther, as indicated above, the features of the deep link sys- 
tem may be provided via a third party application service 
provider (ASP) or e-utilities broker where service is pro- 
vided for a per-use fee. These and other embodiments are 
described further in FIGs. 4-11. 

[0041] FIG. 2 is a flowchart describing the process of implement- 
ing the deep link system in an exemplary embodiment. 
When a source web site author is concerned about com- 
plying with the rights of a target site owner, he/she codes 
a link as a deep link. Associated with each deep link is a 
table of actions that are to be followed before, during, or 
after display of the link. The table may be created by four 
possible methods-manual or automatic, and may be initi- 
ated by the source web site author, or the target web site 
author. These methods are described in FIGs. 4-7. A sam- 
ple deep link table is shown in FIG. 3. 

[0042] a web browser 118 encounters a hyperlink at step 202. It 
is determined whether the hypertext link is a deep link at 
step 204. If not, the target web page 128 is displayed at 
step 206. If the hypertext link is a deep link at step 204, a 
deep link table 110 on the source web site 120 is ac- 
cessed at step 208 (see generally FIG. 3). Any pre-display 



information 304-308 (i.e., intermediate content pages 
132-134) is displayed at step 210 in accordance with the 
links provided in deep link table 110. 
[0043] Once the pre-display information has been presented, the 
target page 128 is displayed at step 212 as indicated in 
table 300 at 310. Simultaneous with the presentment of 
the target page 128, any required "with-display" informa- 
tion 136 is presented at step 214. Finally, post-display in- 
formation 138 is presented at step 216 (shown in table 
300 at 312). 

[0044] FIG. 4 is a flowchart illustrating a manual process for cre- 
ating a deep link table by a source web site author. A 
source web site author decides to include a deep link in 
source web page coding at step 402. The author then cre- 
ates a deep link table 110 by "surfing" the target site 126, 
128, 132-138, and using his/her judgment and reasoning 
to identify links that should be expressed as deep links at 
step 404. This is accomplished by starting at the target 
web site's home page 126 and navigating through the site 
until the page of interest 128 is encountered, and using 
that browsing history to fill in the deep link table 110. At 
step 406, it is determined whether the page of interest 
128 has a target deep link table 114 (i.e., explicit deep 



linking), discoverable by examining the HTML source code 
of the page accessible by the browser. If this explicit in- 
formation is encountered, it is moved directly to the 
source site server 104 to act as a deep link table at step 
408. If no explicit information is found, then the source 
author creates a deep link table 110 as described above at 
step 410 (i.e., implicit deep linking). 
[0045] | n an alternative embodiment, a deep link table 110 may 
be created by a source web site author using an automatic 
process as described in FIG. 5. The author specifies a de- 
sired target link (i.e., a link to a page of interest on the 
target server), and launches an automated process at step 
502. The source web site author manually navigates the 
target web site, finding intermediate content 132-138 
that the target web site author intends to be viewed be- 
fore, during, and/or after the target web page 128 at step 
504. During manual navigation of one or more routes to 
the target page 128, the automated process logs all inter- 
mediate content 132-138 for each path from the target 
web site homepage to the target web page at step 506. At 
step 508, it is determined if multiple paths are discovered 
to the target web page. If multiple paths are found, the 
shortest path is returned to the source server 104 at step 



510. If only one path is found, the sole path is returned to 
the source server 104 at step 512. At step 514, the path is 
used to create a deep link table 110. 
[0046] | n y e t a further embodiment, a deep link table may be 
created by a content owner of the target web site as de- 
scribed in FIG. 6. In step 602, a target web site author in- 
dicates on all target web pages requiring digital rights 
management that desired access is via deep links. The 
target web site author creates a target deep link table 114 
for each deep link on the target web site, listing all re- 
quired pre-display, intermediate content, and post- 
display content 132-138 for each deep link at step 604. 
The target deep link table 114 is loaded into the source 
web site's deep link table 110 when encountered by a web 
browser 118 at step 606 and the respective web pages are 
displayed accordingly. This method allows for the execu- 
tion of run-time decisions 116 indicating how the rights 
management is to be applied. Run-time decisions may be 
based upon the visitor's identification, credentials, brows- 
ing history, or other elements. For example, the target site 
author may make different decisions on required interme- 
diate content, or use other digital rights management 
techniques, depending on who the visitor is (e.g., an ex- 



isting customer versus a new customer), and what the vis- 
itor is thought to be doing at the site (e.g., browsing ver- 
sus making a purchase). 

[0047] | n a further embodiment, a deep link table may be auto- 
matically generated from a target web site server as de- 
scribed in FIG. 7. At step 702, the target web site is 
"crawled" noting all links "out" from each page that is to 
be accessed as a deep link. Connectivity information is in- 
verted to reflect links "in" to each page at step 704. At 
step 706, it is determined from the connectivity data "in" 
and "out", what intermediate content is required for each 
potentially deep linked web page. At step 708 it is deter- 
mined if the potential deep links have multiple paths from 
the target home page. If there are multiple paths, the 
shortest path is selected at step 710. If only one path is 
noted, a deep link table is built for the path (and for each 
link identified as "deep") at step 712. Otherwise, a deep 
link table is built for the shortest path (and for each link 
identified as "deep") at step 714. 

[0048] Once the deep link table has been created and is operable, 
a means for facilitating web page scrolling through a deep 
link path may be provided. This may be accomplished by 
various means such as defining placement of an input de- 



vice such as a mouse on a web page that is used to scroll 
through deep links. It may also be accomplished by mov- 
ing the displayed screen in order to position the item se- 
lected at the same location throughout the deep link path. 
Alternatively, scrolling may be enabled by continuously 
depressing a key that has been defined for this purpose. 

[0049] The deep link system of the present invention may, as 
previously described reside on a stand-alone computer 
system which may have access to the Internet, or may re- 
side on a computer system which is part of the network 
through which there is Internet access. With a connection 
to a network and/or the Internet, there are several differ- 
ent ways in which the process software used to implement 
the systems and methods of the present invention may be 
integrated with the network, and deployed using a local 
network, a remote network, an e-mail system, and/or a 
virtual private network. The following descriptions review 
the various ways of accomplishing these activities. 

[0050] integrationof deep link system software. To implement the 
deep link systems and methods of the present invention, 
process software, which is composed of the software as 
described above and related components including any 
needed data structures, is written and then if desired, in- 



tegrated into a client, server and network environment. 
This integration is accomplished by taking those steps 
needed to enable the process software to coexist 
withother application, operating system and network op- 
erating system software and then installing the process 
software on the clients and servers in the environment 
where the process software will function. An overview of 
this integration activity will now be provided, followed by 
a more detailed description of same with reference to the 
flowcharts of Figures 8A and 8B. 

[0051] The first step in the integration activity is to identify any 
software on the clients and servers where the process 
software will be deployed that are required by the process 
software or that need to work in conjunction with the pro- 
cess software. This includes the network operating sys- 
tem, which is the software that enhances a basic operating 
system by adding networking features. 

[0052] Next, the software applications and version numbers are 
identified and compared to the list of software applica- 
tions and version numbers that have been tested to work 
with the process software. Those software applications 
that are missing or that do not match the correct version 
are upgraded with the correct version numbers. Program 



instructions that pass parameters from the process soft- 
ware to the software applications will be checked to en- 
sure the parameter lists matches the parameter lists re- 
quired by the process software. Conversely parameters 
passed by the software applications to the process soft- 
ware will be checked to ensure the parameters match the 
parameters required by the process software. The client 
and server operating systems including the network oper- 
ating systems are identified and compared to the list of 
operating systems, version numbers and network software 
that have been tested to work with the process software. 
Those operating systems, version numbers and network 
software that do not match the list of tested operating 
systems and version numbers are then upgraded on the 
clients and servers to the required level. 
[0053] After ensuring that the software resident on the computer 
systems where the process software is to be deployed is 
at the correct version level(s), that is, has been tested to 
work with the process software, the integration is com- 
pleted. This is done by installing the process software on 
the clients and servers. Armed with the foregoing 
overview of the integration activity, the following detailed 
description of same should be readily understood. 



[0054] Referring to FIGs. 8A and 8B, step 800 begins the integra- 
tion of the process software for implementing the deep 
link systems and methods of the present invention. It is 
determined whether there are any process software pro- 
grams that will execute on a server or servers at step 802. 
If this is not the case, then integration proceeds to deter- 
mine if the process software will execute on clients at step 
814. If this is the case, then the server addresses are 
identified at step 804. The servers are checked to see if 
they contain software that includes the operating system 
(OS), applications, and network operating systems (NOS), 
together with their version numbers, that have been 
tested with the process software at step 806. The servers 
are also checked to determine if there is any missing soft- 
ware that is required by the process software as part of 
the activity at step 806. A determination is made if the 
version numbers match the version numbers of OS, appli- 
cations and NOS that have been tested with the process 
software at step 808. If all of the versions match and there 
is no missing required software the integration continues 
at step 814. If one or more of the version numbers do not 
match, then the unmatched versions are updated on the 
server or servers with the correct versions at step 810. 



Additionally if there is missing required software, then it 
is updated on the server or servers at step 810. The server 
integration is completed by installing the process software 
at step 812. 

[0055] step 814, which follows either step 802, 808 or 812, de- 
termines if there are any programs of the process soft- 
ware that will execute on the clients. If no process soft- 
ware programs execute on the clients, the integration 
proceeds to step 820 and exits. If this not the case, then 
the client addresses are identified at step 816. 

[0056] At step 818, the clients are checked to see if they contain 
software that includes the operating system (OS), applica- 
tions, and network operating systems (NOS) software, to- 
gether with their version numbers, that have been tested 
with the process software. The clients are also checked at 
step 818 to determine if there is any missing software 
that is required by the process software. 

[0057] At step 822, a determination is made if the version num- 
bers match the version numbers of OS, applications and 
NOS that have been tested with the process software. If all 
of the versions match and there is no missing required 
software, then the integration proceeds to step 820 and 
exits. 



[0058] if one or m0 re of the version numbers do not match, then 
the unmatched versions are updated on the clients with 
the correct versions at step 824. In addition, if there is 
missing required software then it is updated on the clients 
as part of step 824. The client integration is completed by 
installing the process software on the clients at step 826. 
The integration proceeds to step 820 and exits. 

[0059] Deployment of Deep link system Software. It should be 

well understood that the process software for implement- 
ing the deep link system of the present invention may be 
deployed by manually loading the process software di- 
rectly into the client, server and proxy computers from a 
suitable storage medium such as a CD, DVD, etc.. It is 
useful to provide an overview of still other ways in which 
the process software may also be automatically or semi- 
automatically deployed into one or more computer sys- 
tems. The process software may be deployed by sending 
or loading the process software to a central server or a 
group of central servers. From there, the process software 
may then be downloaded into the client computers that 
will execute the process software. Alternatively, the pro- 
cess software may be sent directly to the client system via 
e-mail. The process software is then either detached to a 



directory or loaded into a directory by a button on the e- 
mail that executes a program that detaches the process 
software attached to the e-mail into a directory. Another 
alternative is to send the process software directly to a di- 
rectory on the hard drive of a client computer. Also, when 
there are proxy servers, the automatic or self-automatic 
deployment process will select the proxy server code, de- 
termine on which computers to place the proxy servers' 
code, transmit the proxy server code, and then install the 
proxy server code on the proxy computer. The process 
software will be transmitted to the proxy server and then 
stored on the proxy server. Armed with this overview of 
the possible deployment processes, the following detailed 
description of same with reference to Figures 9A and 9B, 
where the deployment processes are illustrated, will be 
more easily understood. 
[0060] step 900 begins the deployment of the process software. 
It is determined whether there are any programs that will 
reside on a server or servers when the process software is 
executed at step 902. If the answer is "yes", then the 
servers that will contain the executables are identified, as 
indicated in step 936 in Figure 9B. The process software 
for the server or servers is transferred directly to the 



servers' storage via FTP or some other protocol or by 
copying though the use of a shared file system at step 
938. The process software is then installed on the servers 
as indicated at step 940. 

[0061] Next, as shown in step 904 in Figure 9A, a determination 
is made on whether the process software is to be de- 
ployed by having users access the process software on a 
server or servers. If the users are to access the process 
software on servers, then the server addresses that will 
store the process software are identified at step 906. 

[0062] Next, as shown at step 918, a determination is made if a 
proxy server is to be built to store the process software. A 
proxy server is a server that sits between a client applica- 
tion, such as a Web browser, and a real server. It inter- 
cepts all requests to the real server to see if it can fulfill 
the requests itself. If not, it forwards the request to the 
real server. The two primary benefits of a proxy server are 
to improve performance and to filter requests. If a proxy 
server is required, then the proxy server is installed as in- 
dicated at step 920. Next, the process software for imple- 
menting the present invention is sent to the servers, as 
indicated in step 922 either via a protocol such as FTP or 
it is copied directly from the source files to the server files 



via file sharing. Another way of sending the process soft- 
ware to the servers is to send a transaction to the servers 
that contained the process software and have the server 
process the transaction. In this manner, the process soft- 
ware may be received by and copied into the server's file 
system. Once the process software is stored at the 
servers, the users via their client computers, then access 
the process software on the servers and copy it into to the 
file systems of their client computers at step 924. Another 
alternative is to have the servers automatically copy the 
process software to each client and then run the installa- 
tion program for the process software at each client com- 
puter. Either way, the user computer executes or causes 
to be executed the program that installs the process soft- 
ware on the client computer at step 942, then the process 
exits at step 916. 
[0063] Continuing now at step 908 in Figure 9A, a determination 
is made as to whether the process software is to be de- 
ployed by sending the process software to users via e- 
mail. If the answer is yes, then, as indicated at step 910, 
the set of users where the process software will be de- 
ployed are identified together with the addresses of the 
user client computers. The process software is sent via e- 



mail in step 926 (shown in Figure 9B) to each of the users' 
client computers. Then, as indicated in step 928 the users 
then receive the e-mail, and then detach the process soft- 
ware from the e-mail to a directory on their client com- 
puters at step 930. The user then executes the program 
that installs the process software on his client computer at 
step 942, and then exits the process at step 916. 
[0064] Continuing at step 912 (see bottom of Figure 9A), a de- 
termination is made on whether to the process software 
will be sent directly to user directories on their client 
computers. If so, the user directories are identified at step 
914. Then, the process software is transferred directly to 
the identified directory on user's client computer, as indi- 
cated in step 932. This can be done in several ways such 
as but not limited to sharing of the file system directories 
and then copying from the sender's file system to the re- 
cipient user's file system or alternatively using a transfer 
protocol such as File Transfer Protocol (FTP). Next, the 
users access the directories on their client file systems, as 
indicated in step 934, in preparation for installing the 
process software. Finally, the user executes the program 
that installs the process software on his client computer at 
step 942 and then exits the process at step 916. 



[0065] use of Virtual Private Networks for Deep link system Soft- 
ware. The process software may be deployed, accessed 
and executed through the use of a virtual private network 
(VPN). A VPN is any combination of technologies that can 
be used to secure a connection through an otherwise un- 
secured or untrusted network. VPNs are used to improve 
security and can often also reduce operational costs. The 
VPN makes use of a public network, usually the Internet, 
to connect remote sites or users together. Instead of us- 
ing a dedicated, real-world connection such as leased 
line, the VPN uses "virtual" connections routed through 
the Internet from the company's private network to the 
remote site or employee(s). Access to the software via a 
VPN can be provided as a service by specifically construct- 
ing the VPN for purposes of delivery or execution of the 
process software (i.e. the software resides elsewhere). In 
such instance, the lifetime of the VPN is often limited to a 
given period of time or to a given number of deployments 
based on an amount paid. 

[0066] The process software may be deployed, accessed and ex- 
ecuted through either a remote-access VPN or a site- 
to-site VPN. When using a remote-access VPN, the pro- 
cess software is typically deployed, accessed and exe- 



cuted via the secure, encrypted connections between a 
company's private network and remote users through a 
third-party service provider. The enterprise service 
provider (ESP) sets up and/or authorizes access to a net- 
work access server (NAS) and provides the remote users 
with desktop client software for their computers. The 
telecommuters can then dial a phone number (often a 
toll-free number) or attach directly via a cable, DSL or 
wireless modem to reach the NAS and use their VPN client 
software to access the corporate network and to access, 
download and execute the process software. 
[0067] when using a site-to-site VPN, the process software is 
typically deployed, accessed and executed through the 
use of dedicated equipment and large-scale encryption. 
These tools are often used to connect multiple fixed sites 
of a larger company over a public network such as the In- 
ternet. 

[0068] The process software is transported over the VPN via a 
process called tunneling. Tunneling is process involving 
the placing of an entire packet within another packet and 
sending it over a network. The protocol of the outer 
packet is understood by the network and by both points, 
called tunnel interfaces, where the packet enters and exits 



the network. Tunneling generally encapsulates the private 
network data and protocol information within the public 
network transmissions so that the private network proto- 
col information appears to the public network simply as 
unintelligible data. Armed with the foregoing overview of 
virtual private networks and how they operate and how 
they may be used to transport the process software, the 
following more detailed description of same with refer- 
ence to the flowcharts of Figures 10A-10C should be 
more readily understood. 

[0069] step 1000 in FIG. 10A begins the virtual private network 
(VPN) process. A determination is made at step 1002 to 
see if a VPN for remote access is required. If it is not re- 
quired, then flow proceeds to step 1004. If it is required, 
then flow proceeds to step 1008 where a determination is 
made if as to whether a remote access VPN exists that is 
available for use. 

[0070] if a remote access VPN does exist, then flow proceeds to 
step 1010 in Figure 10A. Otherwise flow proceeds to step 
1034 (see top of Figure 10C), where a third party provider 
that will provide the secure, encrypted connections be- 
tween the company's private network and the company's 
remote users is identified. Next, as indicated in step 



1036, the company's remote users are identified. Then, at 
step 1038, identified third party provider then sets up a 
network access server (NAS). The NAS allows the remote 
users to dial a phone number (typically a toll free number) 
or attach directly via a cable, DSL, wireless or other mo- 
dem to access, download and install the desktop client 
software for the remote-access VPN as indicated at step 
1040. 

[0071] Returning to step 1010 in Figure 10A, after the remote 
access VPN has been built or if it been previously in- 
stalled, the remote users can then access the process 
software by dialing into the NAS or attaching directly via a 
cable, DSL or other modem into the NAS. This step 1010 
allows entry into the corporate network, as indicated at 
step 1012, where the process software may be accessed. 
The process software is transported to the remote user's 
desktop computer over the network via tunneling. During 
tunneling, see step 1014, the process software is divided 
into packets and each packet including the data and pro- 
tocol for that packet, is placed within another packet. 
When the process software arrives at the remote user's 
desktop computer, it is removed from the packets, recon- 
stituted and then may be executed on the remote users 



desktop, as indicated at step 1016. 

[0072] Returning now to step 1004 in Figure 10A, a determina- 
tion is made to see if a VPN for site-to-site access is re- 
quired. If it is not required, then flow proceeds to the exit 
at step 1006. If it is required, flow proceeds to step 1020 
(see top of Figure 10B) to determine if the site-to-site 
VPN exists. If it does exist, then flow proceeds to step 
1026. If it does not exist, then as indicated at step 1022, 
dedicated equipment required to establish a site-to-site 
VPN is installed. Then build the large-scale encryption 
into the VPN at step 1024. 

[0073] After the site-to-site VPN has been built or if it had been 
previously established, the users access the process soft- 
ware via the VPN as indicated in step 1026. Next, the pro- 
cess software is transported to the site users over the net- 
work via tunneling as indicated in step 1028. As previ- 
ously explained, the process software is divided into 
packets and each packet including the data and protocol 
is placed within another packet, as indicated in step 1030. 
When the process software arrives at the remote user's 
desktop, it is removed from the packets, reconstituted 
and is executed on the site users desktop at step 1032. 
Then the process proceeds to step 1006 and exits. 



[0074] on Demand Computing for Deep link system Software. 

The process software for implementing the deep link sys- 
tem of the present invention may be shared, that is, it may 
be used to simultaneously serve multiple customers in a 
flexible, automated fashion. It is process software that is 
easily standardized, requiring little customization, and it 
is scalable, thus providing capacity on demand in a pay- 
as-you-go model known as "on demand" computing. An 
overview of on demand computing as applied to the mes- 
sage analysis software will now be provided, followed by a 
more detailed description of same made with reference to 
the flowcharts of Figures 11A and 11B. 

[0075] The process software for implementing the present inven- 
tion can be stored on a shared file system accessible from 
one or more servers. The process software may be exe- 
cuted via transactions that contain data and server pro- 
cessing requests that use measurable CPU units on the 
accessed server. CPU units are units of time such as min- 
utes, seconds, and hours on the central processor of the 
server. Additionally the accessed server may make re- 
quests of other servers that require CPU units. CPU units 
are an example that represents but one measurement of 
use. Other measurements of use include but are not Mm- 



ited to network bandwidth, memory usage, storage usage, 
packet transfers, complete transactions etc. 

[0076] when multiple customers use the same process software 
application, their transactions are differentiated by the 
parameters included in the transactions that identify the 
unique customer and the type of service for that cus- 
tomer. All of the CPU units and other measurements of 
use that are used for the services for each customer are 
recorded. When the number of transactions to any one 
server reaches a number that begins to affect the perfor- 
mance of that server, other servers are accessed to in- 
crease the capacity and to share the workload. Likewise, 
when other measurements of use such as network band- 
width, memory usage, storage usage, etc. approach a ca- 
pacity so as to affect performance, additional network 
bandwidth, memory usage, storage etc. are added as 
needed to share the workload. 

[0077] The measurements of use used for each service and cus- 
tomer are sent to a collecting server that sums the mea- 
surements of use for each customer for each service that 
was processed anywhere in the network of servers that 
provide the shared execution of the process software. The 
summed measurements of use units are periodically mul- 



tiplied by unit costs and the resulting total process soft- 
ware application service costs are alternatively sent to the 
customer and or indicated on a web site accessed by the 
customer who then remits payment to the service 
provider. 

[0078] | n another embodiment, the service provider requests 

payment directly from a customer account at a banking or 
financial institution. In yet another embodiment, if the 
service provider is also a customer of the customer that 
uses the process software application, the payment owed 
to the service provider is reconciled to the payment owed 
by the service provider to minimize the transfer of pay- 
ments. Armed with the foregoing overview, the detailed 
description of the on demand computing with respect to 
the process software, the following detailed description of 
same with reference to Figures 11A and 11B, where the on 
demand processes are illustrated, will be more easily un- 
derstood. 

[0079] step 1100 begins the On Demand process. A transaction 
is created that contains the unique customer identifica- 
tion, the requested service type and any service parame- 
ters that further specify the type of service as indicated in 
step 1102. The transaction is then sent to the main server 



as shown in step 1104. In an On Demand environment the 
main server can initially be the only server, then as capac- 
ity is consumed other servers are added to the On De- 
mand environment. 

[0080] The server central processing unit (CPU) capacities in the 
On Demand environment are queried at step 1106. The 
CPU requirement of the transaction is estimated, then the 
servers available CPU capacity in the On Demand environ- 
ment are compared to the transaction CPU requirement to 
see if there is sufficient CPU available capacity in any 
server to process the transaction as indicated in step 
1108. If there is not sufficient server CPU available capac- 
ity, then additional server CPU capacity is allocated to 
process the transaction as indicated in step 1116. If there 
was already sufficient available CPU capacity, the transac- 
tion is sent to a selected server at step 1110. 

[0081] Before executing the transaction, a check is made of the 
remaining On Demand environment to determine if the 
environment has sufficient available capacity for process- 
ing the transaction as indicated at step 1112. This envi- 
ronment capacity consists of such things as but not lim- 
ited to network bandwidth, processor memory, storage, 
etc. If there is not sufficient available capacity, then ca- 



pacity will be added to the On Demand environment as in- 
dicated in step 1114. Next the required software to pro- 
cess the transaction is accessed, loaded into memory, 
then the transaction is executed as indicated in step 1118 
The usage measurements are recorded as indicated in 
step 1120. The usage measurements consist of the por- 
tions of those functions in the On Demand environment 
that are used to process the transaction. The usage of 
such functions as, but not limited to, network bandwidth, 
processor memory, storage and CPU cycles are what is 
recorded. The usage measurements are summed, multi- 
plied by unit costs and then recorded as a charge to the 
requesting customer as indicated in step 1122. 
[0082] if the customer has requested that the On Demand costs 
be posted to a web site as indicated in step 1124, then 
they are posted to a web site at step 1126. If the customer 
has requested that the On Demand costs be sent via e- 
mail to a customer address as indicated in step 1128, 
then they are sent to the customer via e-mail as indicated 
in step 1130. If the customer has requested that the On 
Demand costs be paid directly from a customer account at 
step 1132, then payment is received directly from the 
customer account at step 1134. The On Demand process 



proceeds to step 1136 and then exits. 

[0083] As will be appreciated from the above description, the re- 
strictions and limitations that exist with messaging sys- 
tems are efficiently overcome. The deep link system of the 
invention enables users of email and instant messaging 
systems to work interoperably, allowing them to switch 
between messaging systems, in order to improve overall 
communicational efficiency. 

[0084] As described above, the present invention can be embod- 
ied in the form of computer-implemented processes and 
apparatuses for practicing those processes. The present 
invention can also be embodied in the form of computer 
program code containing instructions embodied in tangi- 
ble media, such as floppy diskettes, CD-ROMs, hard 
drives, or any other computer-readable storage medium, 
wherein, when the computer program code is loaded into 
and executed by a computer, the computer becomes an 
apparatus for practicing the invention. The present inven- 
tion can also be embodied in the form of computer pro- 
gram code, for example, whether stored in a storage 
medium, loaded into and/or executed by a computer, or 
transmitted over some transmission medium, such as over 
electrical wiring or cabling, through fiber optics, or via 



electromagnetic radiation, wherein, when the computer 
program code is loaded into and executed by a computer, 
the computer becomes an apparatus for practicing the in- 
vention. When implemented on a general-purpose micro- 
processor, the computer program code segments config- 
ure the microprocessor to create specific logic circuits. 
[0085] while the invention has been described with reference to 
exemplary embodiments, it will be understood by those 
skilled in the art that various changes may be made and 
equivalents may be substituted for elements thereof with- 
out departing from the scope of the invention. In addition, 
many modifications may be made to adapt a particular 
situation or material to the teachings of the invention 
without departing from the essential scope thereof. 
Therefore, it is intended that the invention not be limited 
to the particular embodiments disclosed for carrying out 
this invention, but that the invention will include all em- 
bodiments falling within the scope of the claims. 



